Customer wants to understand our strategy for breaking cluster logs into different partitions and files. They want to be able to ingest these logs into a tool that needs to understand this. They have indicated that the logs used to all be in one file unless a job was long running (1+ hour), but recently it seems to break into separate partitions / files earlier. Does anyone happen to know what the expected behavior is?